CVE-2024-38820 CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match Exception

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase has some Locale dependent exceptions that could potentially result in fields not protected as expected...

CVE-2024-38820

The CVE-2024-38820 issue concerns Spring Framework DataBinder: lowercase conversion for disallowedFields and request parameter names was made locale-independent, but locale-dependent edge cases in String.toLowerCase() can still bypass the checks. Affected products/versions from linked advisories ...

CVE-2024-38820 CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match Exception

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase has some Locale dependent exceptions that could potentially result in fields not protected as expected...

CVE-2024-38820 CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match Exception

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase has some Locale dependent exceptions that could potentially result in fields not protected as expected...

CVE-2024-38820: Improper Handling of Case Sensitivity

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase has some Locale dependent exceptions that could potentially result in fields not protected as expected...

VMware Spring Framework 安全漏洞

VMware Spring Framework is a set of open source Java, JavaEE application frameworks from VMware. The framework helps developers build high-quality applications. A security vulnerability exists in VMware Spring Framework that stems from case-sensitive matching exceptions that could cause fields to...

WordPress Sovratec Case Management plugin <= 1.0.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Sovratec Case Management versions = 1.0.0...

Spring Framework DataBinder Case Sensitive Match Exception

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase has some Locale dependent exceptions that could potentially result in fields not protected as expected...

CVE-2024-48918

creationtimestamp| type| source ---|---|--- 2024-10-16 23:55:18+00:00| seen| https://t.me/cvedetector/8127...

CVE-2024-47674

In the Linux kernel, the following vulnerability has been resolved: mm: avoid leaving partial pfn mappings around in error case As Jann points out, PFN mappings are special, because unlike normal memory mappings, there is no lifetime information associated with the mapping - it is just a raw...

CVE-2024-9914

creationtimestamp| type| source ---|---|--- 2024-10-13 20:35:57+00:00| seen| https://t.me/cvedetector/7787 2026-07-12 01:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqfyftqfr423...

Malware in case-result-reporter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CentOS 7 : kernel-alt (RHSA-2020:0174)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0174 advisory. - In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanoutadd from setsockopt and bind on an AFPACKET socket...

Rogue AI: What the Security Community is Missing

This is the fourth blog post in an ongoing series on Rogue AI. Keep following for more technical guidance, case studies, and insights...

CVE-2023-3441

creationtimestamp| type| source ---|---|--- 2024-10-01 12:44:44+00:00| seen| https://t.me/cvedetector/6741...

SUSE CVE-2024-46829

In the Linux kernel, the following vulnerability has been resolved: rtmutex: Drop rtmutex::waitlock before scheduling rtmutexhandledeadlock is called with rtmutex::waitlock held. In the good case it returns with the lock held and in the deadlock case it emits a warning and goes into an endless...

CVE-2024-20350

creationtimestamp| type| source ---|---|--- 2024-09-25 20:13:23+00:00| seen| https://t.me/cvedetector/6350 2024-09-26 19:30:05+00:00| seen| https://t.me/truesecator/6254 2024-09-27 08:45:27+00:00| seen| https://t.me/icscert/923 2024-09-29 04:48:43+00:00| published-proof-of-concept|...

Malicious code in case-result-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53752de38b0f242f1a98e32994dffdc4793390a73bf2685bb38db58aff3156fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8986 Malicious code in case-result-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53752de38b0f242f1a98e32994dffdc4793390a73bf2685bb38db58aff3156fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

A Bootiful Podcast: Flowable cofounder and my friend Joram Barrez on workflow, case management, AI, Spring, and so much more

Hi, Spring fans! In this installment I catch up with my friend Joram Barrez, cofounder of Flowable, an amazing and opensource workflow engine, on their latest and greatest, AI, Spring, and so much more. workflow bpmn apache2 springboot java...